Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D822BA90DD4FEB0C345261D4BA7D1225762A6170.cer
File:                     D822BA90DD4FEB0C345261D4BA7D1225762A6170.cer (raw, json)
Hash identifier:          Iv6QJspCEmFl1tC4zab3VKE/kTj8/KC6T3T9D6KsdVQ=
Subject key identifier:   D8:22:BA:90:DD:4F:EB:0C:34:52:61:D4:BA:7D:12:25:76:2A:61:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E0CD1E66F7683133CA7375A4762D0EF0C121CFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/D822BA90DD4FEB0C345261D4BA7D1225762A6170.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 13:03:30 +0000
Certificate not after:    Wed 29 Jan 2025 13:08:30 +0000
Subordinate resources:    AS: 270415
                          IP: 190.107.160.0/22
                          IP: 2804:6ba8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0c:d1:e6:6f:76:83:13:3c:a7:37:5a:47:62:d0:ef:0c:12:1c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 13:03:30 2024 GMT
            Not After : Jan 29 13:08:30 2025 GMT
        Subject: CN=D822BA90DD4FEB0C345261D4BA7D1225762A6170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:f7:45:38:14:d1:88:65:97:54:db:c2:ea:
                    7c:ba:f9:20:c1:ea:5b:7a:b8:9f:bb:97:1e:be:db:
                    fb:52:4a:79:bc:1e:d0:d7:8d:0f:c2:77:53:62:b3:
                    9a:a6:88:b7:c3:7c:83:ee:2c:d1:7b:e3:67:5b:7e:
                    61:02:7b:01:61:67:5c:c8:7a:5b:ce:92:a0:0b:04:
                    b3:de:e4:50:4c:f7:81:4a:f5:9d:b1:56:cb:b2:66:
                    b9:3a:5e:7c:b3:9a:0a:df:71:74:72:10:a9:b1:73:
                    d3:8a:c8:09:c7:1b:2b:40:ab:2f:0b:56:44:5a:b4:
                    64:f2:98:e7:3c:c4:c7:7d:60:a7:a4:8f:e0:31:d7:
                    82:1c:dd:90:b9:84:3d:38:a6:f7:cf:aa:ff:6f:27:
                    ba:b0:50:34:b4:fb:38:30:38:f9:1f:35:5a:37:fb:
                    30:b3:97:54:e4:d4:d0:00:9c:f1:ef:52:f3:8d:8e:
                    96:b3:78:db:67:6a:83:6d:54:19:06:68:b3:0d:c3:
                    d9:ef:33:26:e5:0a:9e:09:06:fb:3a:86:5a:48:ad:
                    76:da:e4:c4:c1:24:53:e1:cb:4b:48:4e:58:92:58:
                    a5:7c:78:6e:bb:30:50:e9:80:28:b1:ad:10:84:7d:
                    59:fd:bd:cd:a4:fd:39:29:c0:9a:90:a0:4e:39:a8:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:22:BA:90:DD:4F:EB:0C:34:52:61:D4:BA:7D:12:25:76:2A:61:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/D822BA90DD4FEB0C345261D4BA7D1225762A6170.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.160.0/22
                IPv6:
                  2804:6ba8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270415

    Signature Algorithm: sha256WithRSAEncryption
         11:36:43:7c:9a:d0:6b:b9:66:9c:ef:30:b5:ae:cf:54:0e:e1:
         bd:ce:1f:29:47:fd:9f:f3:f3:fb:e7:74:a7:2b:1d:c3:d6:65:
         cd:af:fd:8f:c0:40:32:12:a7:17:fb:9d:83:9e:5a:c3:b5:07:
         03:cd:6b:d4:e1:a6:bd:a2:f5:a8:3e:9a:d3:b5:b0:07:17:f9:
         73:e6:b6:bd:90:07:5e:40:3f:c6:4f:69:76:fc:01:59:ca:11:
         b8:12:d5:f2:3d:f2:04:4a:fb:98:5e:4b:06:33:61:33:20:2a:
         62:68:06:ed:97:6c:f5:b6:41:a7:27:74:de:13:69:65:9f:fe:
         51:59:0e:f8:99:7a:a0:2a:fd:2f:89:01:cc:19:bc:c7:8c:41:
         ff:4a:c0:41:89:8a:f9:ef:9c:bd:84:9d:8e:af:b2:77:4d:ba:
         96:7a:37:3c:c0:80:54:9e:b5:f9:58:42:6a:4f:1a:cd:23:6c:
         83:d2:a3:fc:d7:79:89:f1:f6:0b:1e:28:1b:c9:1e:7a:ed:ec:
         90:83:bb:8e:42:d8:b1:37:d3:25:ea:86:44:1e:33:dc:d7:53:
         8d:b1:a6:88:56:af:7f:02:fd:1c:cf:88:4d:08:39:64:bc:96:
         d5:7b:c9:d3:d4:a7:49:75:9d:67:bd:ee:51:db:e2:6a:37:4b:
         b0:18:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org